How can we prevent ndpid to fire some events ?

Open fateme81 opened this issue 2 years ago • 2 comments

I only need some of the events from nDPId not all of them ! All i want is only FLOW_EVENT_END logs in Unix-Domain socket.

Sep 27 '23 10:09 fateme81

You can still ignore them. In the future there may be an nDPId command line parameter to control this kind of things. But first I need to figure how to do that in a way that it does not break flow handling.

Sep 27 '23 12:09 utoni

Please also note that FLOW_EVENT_END is only fired for TCP. For UDP based protocols e.g. QUIC you need to wait for a FLOW_EVENT_IDLE.

Sep 28 '23 07:09 utoni